CVE-2026-68321
Received Received - Intake

FDIR Filter Leak in Linux Kernel txgbe Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix FDIR filter leak on remove Perfect FDIR filters can be added while the interface is down and are kept on the software list for later restore. unregister_netdev() only calls ndo_stop when the device is up, so txgbe_fdir_filter_exit() in txgbe_close() is skipped in that case and the filters are leaked on driver remove. Free the filter list from txgbe_remove() as well.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68321
EUVD
EUVD-2026-55422

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel txgbe *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the txgbe network driver. When FDIR filters are added while the network interface is down, they are not properly cleaned up during driver removal because txgbe_fdir_filter_exit() is skipped. This leads to filters remaining allocated in memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's txgbe network driver and involves a filter leak during driver removal. Detection requires checking for active FDIR filters on txgbe interfaces, especially after driver unloading or system reboots. Inspect kernel logs for txgbe-related errors or filter-related warnings. Use commands like 'ethtool -S <interface>' to check filter statistics or 'dmesg | grep txgbe' to review driver messages.

Impact Analysis

The impact is primarily on system stability and resource usage. The leaked filters consume memory, which could lead to gradual performance degradation or potential crashes if the driver is repeatedly loaded and unloaded. Systems using the txgbe driver may experience increased memory usage over time.

Mitigation Strategies

Apply the latest kernel update that includes the fix for CVE-2026-68321. If updating is not immediately possible, avoid unloading the txgbe driver while the interface is down. Ensure interfaces are brought up before driver removal to trigger proper cleanup. Monitor system logs for filter leaks after driver operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68321. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart